Filtered by vendor Draftpress
Subscriptions
Filtered by product Header Footer Code Manager
Subscriptions
Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-39989 | 1 Draftpress | 1 Header Footer Code Manager | 2024-11-21 | 5.4 Medium |
| Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions. | ||||
| CVE-2022-0899 | 1 Draftpress | 1 Header Footer Code Manager | 2024-11-21 | 6.1 Medium |
| The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting. | ||||
| CVE-2022-0710 | 1 Draftpress | 1 Header Footer Code Manager | 2024-11-21 | 6.1 Medium |
| The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter. | ||||
| CVE-2021-24791 | 1 Draftpress | 1 Header Footer Code Manager | 2024-11-21 | 7.2 High |
| The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections | ||||
Page 1 of 1.